Back to skill
Skillv1.0.7
VirusTotal security
marsbit-news-skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:03 AM
- Hash
- cd50c866b1a310ec23dd0a18c2063f5fb8f058d361ca4acc13d930fb81ab7aa9
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: marsbit-news-skill Version: 1.0.7 The skill is designed to fetch news and flash data from `marsbit.co` using `curl` to interact with a specific MCP API endpoint, which aligns with its stated purpose. While `package.json` declares `exec` and `read` capabilities, the `SKILL.md` instructions for the AI agent's runtime behavior only leverage `exec` for benign `curl` commands targeting `https://www.marsbit.co/api/mcp`. There are no instructions for the agent to use the `read` tool, exfiltrate data, establish persistence, or perform any other actions indicative of malicious intent or prompt injection.
- External report
- View on VirusTotal